==========================================================================
Ubuntu Security Notice USN-6727-2
April 11, 2024<\/p>\n
nss regression
==========================================================================<\/p>\n
A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n
– Ubuntu 22.04 LTS
– Ubuntu 20.04 LTS<\/p>\n
Summary:<\/p>\n
USN-6727-1 introduced a regression in NSS.<\/p>\n
Software Description:
– nss: Network Security Service library<\/p>\n
Details:<\/p>\n
USN-6727-1 fixed vulnerabilities in NSS. The update introduced a regression
when trying to load security modules on Ubuntu 20.04 LTS and Ubuntu 22.04
LTS. This update fixes the problem.<\/p>\n
We apologize for the inconvenience.<\/p>\n
Original advisory details:<\/p>\n
It was discovered that NSS incorrectly handled padding when checking PKCS#1
certificates. A remote attacker could possibly use this issue to perform
Bleichenbacher-like attacks and recover private data. This issue only
affected Ubuntu 20.04 LTS. (CVE-2023-4421)
It was discovered that NSS had a timing side-channel when performing RSA
decryption. A remote attacker could possibly use this issue to recover
private data. (CVE-2023-5388)
It was discovered that NSS had a timing side-channel when using certain
NIST curves. A remote attacker could possibly use this issue to recover
private data. (CVE-2023-6135)
The NSS package contained outdated CA certificates. This update refreshes
the NSS package to version 3.98 which includes the latest CA certificate
bundle and other security improvements.<\/p>\n
Update instructions:<\/p>\n
The problem can be corrected by updating your system to the following
package versions:<\/p>\n
Ubuntu 22.04 LTS:
libnss3 2:3.98-0ubuntu0.22.04.2<\/p>\n
Ubuntu 20.04 LTS:
libnss3 2:3.98-0ubuntu0.20.04.2<\/p>\n
In general, a standard system update will make all the necessary changes.<\/p>\n
References:
https:\/\/ubuntu.com\/security\/notices\/USN-6727-2
https:\/\/ubuntu.com\/security\/notices\/USN-6727-1
https:\/\/launchpad.net\/bugs\/2060906<\/p>\n
Package Information:
https:\/\/launchpad.net\/ubuntu\/+source\/nss\/2:3.98-0ubuntu0.22.04.2
https:\/\/launchpad.net\/ubuntu\/+source\/nss\/2:3.98-0ubuntu0.20.04.2<\/p>\n","protected":false},"excerpt":{"rendered":"
==========================================================================Ubuntu Security Notice USN-6727-2April 11, 2024 nss regression========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 22.04 LTS– Ubuntu 20.04 LTS Summary: USN-6727-1 introduced a regression in NSS. Software Description:– nss: Network Security Service library Details: USN-6727-1 fixed vulnerabilities in NSS. The update introduced a regressionwhen trying to load security …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-56236","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/56236","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=56236"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/56236\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=56236"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=56236"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=56236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}